CISA seeks to engage the wider community to more quickly identify active exploitation.

In the security news this week: FCC router bans and the hidden firmware update problem Why extending support timelines actually improves security Github supply chain concerns and the evolving SBOM ecosystem CRA and NIS2 compliance deadlines are getting very real The EU Cyber Resilience Act’s 24-hour vulnerability disclosure requirement Security r...

A GitHub leak exposed CISA credentials, sparking concerns over secrets management and leadership.

The automatic tank gauge systems were reportedly exposed online without passwords.

Cybersecurity leaders warn weakened CISA could hurt AI-era defense and threat response.

The variant was used in recent attacks against TanStack and others – but it’s not the original, researchers say.

Maximum-severity bug an authentication bypass flaw that’s considered the highest value target in an attacker’s playbook.

Cisco Catalyst, Canvas, Exchange 0-Days, BitLocker Bypass, Mini Shai Hulud, Node IPC, Patch Tuesday, GPT-5.5, Supply Chain Attacks, and More on the Security Weekly News